This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa
File: 437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa (raw, json)
Hash identifier: TSbNNNz/uBPjtsxlf8nr0orTKY0T2p0WiL5T0WGAo1Q=
Subject key identifier: 7D:81:2E:9B:4A:83:0A:97:C6:5D:93:24:86:22:C7:D0:6E:3A:D5:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63D3E51C84F4EBF9811644D7ECF30B3DB218B43D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa
Signing time: Sat 22 Nov 2025 00:30:49 +0000
ROA not before: Sat 22 Nov 2025 00:30:49 +0000
ROA not after: Fri 20 Feb 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff1:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d3:e5:1c:84:f4:eb:f9:81:16:44:d7:ec:f3:0b:3d:b2:18:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 22 00:30:49 2025 GMT
Not After : Feb 20 23:59:59 2026 GMT
Subject: serialNumber=44ba1193642ae69aadcd2b26eb1ce855215145a66d17b780d1960d0bd215ffb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:d7:cc:28:79:4a:ea:1e:df:8b:d6:d0:f4:
86:71:d4:4c:09:a1:50:5c:a4:bf:a2:c6:81:ba:f0:
56:9e:83:bb:2a:18:ba:5a:5a:b7:76:14:0c:81:d1:
2e:7b:c4:3f:48:d0:73:c7:fe:e6:f9:fd:2f:f4:86:
34:76:ed:ef:f8:09:d0:93:ad:db:91:09:f9:a3:32:
58:ef:26:7b:9d:bf:2b:17:dd:09:34:ae:7b:5f:eb:
04:d3:34:b7:65:c5:74:ab:a9:7b:e6:a5:12:9d:78:
39:6a:16:ea:bf:70:82:26:fe:3e:c4:dc:38:85:67:
8f:1e:03:ec:f9:af:3d:d6:ee:82:ca:41:42:06:05:
98:85:5b:95:66:01:d5:56:f7:59:78:83:e3:fe:14:
19:8d:8c:a1:cf:87:d5:e5:51:83:b5:51:10:e2:76:
c4:d7:a8:69:b3:a5:8d:ce:20:7d:89:3b:1c:0f:8c:
9b:f8:10:6d:26:86:a8:e4:d5:8a:54:36:f4:e9:3f:
a6:46:37:7e:23:9f:5b:1a:dd:dc:d1:8c:ec:9e:c1:
89:78:ba:51:98:68:ad:85:64:6b:ec:48:4c:d3:39:
b7:9a:6d:91:28:df:02:16:16:16:df:27:46:9e:87:
1d:b3:1a:2d:39:98:54:d3:04:ad:35:00:8d:81:36:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:81:2E:9B:4A:83:0A:97:C6:5D:93:24:86:22:C7:D0:6E:3A:D5:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:2000::/40
Signature Algorithm: sha256WithRSAEncryption
d6:ab:cf:a1:39:a3:78:31:40:88:21:d6:f3:19:68:9e:0d:d5:
5e:8c:13:8a:f9:6f:6e:ad:7c:89:ce:04:03:7a:39:55:c2:16:
ca:e8:cf:88:33:d2:34:0d:aa:51:57:47:7e:f0:7e:5a:7b:e7:
9c:2c:52:b2:e3:52:30:71:54:85:8d:a8:dd:da:ad:26:12:99:
96:2a:4d:54:de:c0:ac:b1:43:0b:be:a4:f8:43:c0:a8:da:93:
4e:43:39:e3:41:77:87:fa:98:54:5c:69:cc:d3:b4:48:e5:23:
98:da:35:89:1b:84:b6:86:dd:33:52:0d:62:87:84:61:bd:87:
49:e5:1b:a7:6a:53:87:47:08:5b:a5:2d:61:c6:27:ea:e9:84:
b0:b8:a2:b4:a9:26:83:ff:85:29:21:35:af:95:59:fb:f3:3b:
d9:d9:c5:d6:dc:1f:f7:57:d5:5a:7c:1a:d1:12:29:af:fa:f9:
41:f8:91:80:3e:90:a2:0d:f9:2e:97:0a:0e:77:81:d5:94:38:
bb:0c:19:36:86:59:bc:34:e3:0c:24:8c:8b:78:4d:d2:6f:e9:
51:b2:f9:4f:5e:6a:b0:55:31:7e:2a:7d:67:eb:1d:39:9d:2a:
da:c4:ed:3d:45:b0:38:ed:0a:73:29:0b:e9:9a:71:b3:1a:c9:
d1:1d:4c:ac
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUY9PlHIT06/mBFkTX7PMLPbIYtD0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIyMDAzMDQ5WhcNMjYwMjIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGJhMTE5MzY0MmFlNjlhYWRjZDJiMjZlYjFjZTg1NTIx
NTE0NWE2NmQxN2I3ODBkMTk2MGQwYmQyMTVmZmI0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQ79fMKHlK6h7fi9bQ9IZx1EwJoVBcpL+ixoG68Faeg7sq
GLpaWrd2FAyB0S57xD9I0HPH/ub5/S/0hjR27e/4CdCTrduRCfmjMljvJnudvysX
3Qk0rntf6wTTNLdlxXSrqXvmpRKdeDlqFuq/cIIm/j7E3DiFZ48eA+z5rz3W7oLK
QUIGBZiFW5VmAdVW91l4g+P+FBmNjKHPh9XlUYO1URDidsTXqGmzpY3OIH2JOxwP
jJv4EG0mhqjk1YpUNvTpP6ZGN34jn1sa3dzRjOyewYl4ulGYaK2FZGvsSEzTObea
bZEo3wIWFhbfJ0aehx2zGi05mFTTBK01AI2BNoj/AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUfYEum0qDCpfGXZMkhiLH0G461WwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQzN2QzYzM4LWMzNzAtNGFmZS1hNDQ0LTA3ZWU1ZWUxZWQ5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/xIDANBgkqhkiG9w0BAQsFAAOCAQEA1qvPoTmjeDFAiCHW8xlong3V
XowTivlvbq18ic4EA3o5VcIWyujPiDPSNA2qUVdHfvB+WnvnnCxSsuNSMHFUhY2o
3dqtJhKZlipNVN7ArLFDC76k+EPAqNqTTkM540F3h/qYVFxpzNO0SOUjmNo1iRuE
tobdM1INYoeEYb2HSeUbp2pTh0cIW6UtYcYn6umEsLiitKkmg/+FKSE1r5VZ+/M7
2dnF1twf91fVWnwa0RIpr/r5QfiRgD6Qog35LpcKDneB1ZQ4uwwZNoZZvDTjDCSM
i3hN0m/pUbL5T15qsFUxfip9Z+sdOZ0q2sTtPUWwOO0KcykL6ZpxsxrJ0R1MrA==
-----END CERTIFICATE-----
Generated at Fri Dec 5 10:50:50 2025 by rpki-client